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1 Digital/Interne? Distribution Channel Management System 

2 far Digital Content 
3 

4 

5 Inyene * - 

6 Peter O'Deli 

7 Charles Jennings 

8 Michael Hudson 

9 Christopher E. ienkin 
1 0 Danie! M. Waocbrd 
11 

12 
13 

14 jackg tventkm 

15 Field of me Invert . 

16 In* present inv<r - , - > 

17 i 1 < o^o^fofcommerciaitrcmsoctfonsto be perfor aver 

18 ie Inte s articular, tc wrtm s ;g < - «• ? that 

19 supports the electronic distribution of digital content through a trusted 

20 distribution channel. 
21 

22 DescHption of the Related Art; 

23 While the growth of Internet commerce has and continues to 

24 grow at a substantia! pace, problems remain in determining how to manage 

25 and perform many different types of connnercoi m-mroctions over ihe mp;mat 

26 or other open network < nicotic* mediums. Th« lei jenera 
2? concern the issue of establishing a trusted relationship between providers and 
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1 consumers hosed on o system that maintains, if no! enforces, the credibility of 

2 the trusted relationship. 

3 In commerce oriented to the delivery of physical goods and services the 

4 trusted relationship ho;- an inherent touch-alone for guaranteeing performance 

5 of commercial transactions. The delivered goods and services must be 

6 acceptable to the consumer or the transaction will be returned or refused. In 
? the cose of commerce directed to fhe delivery of digital content, however, there 

8 is no such touch-stone. The digital goods delivered are essentially intangible, 

9 f \ { also tran enh Th s i >per digital good 

1 0 were delivered by the content providers and whether additional copies of fhe 

11 gcx s< en I I f i ? he reo onk 

1 2 commerce of digital goods. 

IS Beyond fhe trust issues, performance of commercial electronic 

M transactions for digital content are limited by a number of practical, 

15 commercial,, and even ethical issues that must be adequately resolved. One 

W of the most immediate and tangible problems that must be faced before wide- 

1 7 spread adoption of any system of electronic commerce in digital goods can be 

1 8 used is thot many forms of digital goods are relatively small in terms of their 

19 direct financial cost to a consumer. The existing public financial transaction 

20 system is based on charging transaction fees for obtaining compensation for 

21 fhe pro fN I'f nutated cost 

22 associated with the commercialisation ot digital goods severely consumes,. 

23 ! o N .> <• * * "W. < ; ^ > o f t ; a t < - o w ; u I 

24 goods, 

25 Substantial commercialization problems also arise from fhe existing 

26 natural structure of the content providers and their relationships with the 

27 consuming pub! c tent ongsnators for o grfal goons, uch 

28 as the many different kinds of artists, performers., writers, and other artisans 

29 oi works jnfed by an intar gh sre rarely < 3 if 

30 directly commerciaiize fhe * t " < 

31 packaged, and distributed through a myriad of producers, distributors, 

32 warehausers, and resellers before ever reaching a retailer. These works are 

33 also often commercialized in conjunction with advertising, promotion,, and 
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1 othe < i j r t >pof ligation of these or other goods, 

2 even goods that are not amenable to electronic sole or delivery The 

3 complexity of these comro&raahzat.or: processes has re-suited in the 

4 i el r r he I s that together create and 

5 operate the various distribution channels that connect today's content 

6 providers with their consumers. 

7 Today, there are only limited, and very simplistic electronic distribution 

8 channels for a small and very select group and type of digital goods. The 

9 purely electronic distribution of computer software titles is typically supported 
10 : > ntet >et retails sthu ugi d e td -v I act W< bt tes The hgifolgc xissoid 
H are highly unitized., typically represent a significant financial cost to the 

12 consumer, and folly correspond to conventionally distributed and retailed 

13 goods. Essentially all other aspects of these electronic distribution channels, 

14 such as advertising and promotions, ore conventional in nature, 

15 Consequently, there Is not any substantially or even significantly complete 

16 electronic distribution channels that are capable of handling the wide variety 
1 ? of digital goods commerce that potentially exists. 

18 Finally, the recurring Issue of privacy, os particularly occurs in all 

19 matters involving the Internet, also creates some unique problems for 

20 electronic commerce for digital goods. Regardless of the specifics of particular 

21 !n< \ ere sac eo? a 1 > 

22 need for consumers to hove confidence that their electronic transactions ore 

23 and remain private. Like any other produced o no ui •> I 

24 the records of electronic transactions me themselves digital goods that, If 

25 available, ore susceptible to being processed, repackaged, and sold. Where 

26 the digital goods distribution channel involves only the electronic retailer, on 
2? apparently adequate degree of trust over the privacy of any particular 

28 transact! m seems to es i"his d reg i < 

29 however, is very unlikely to exist where an electronic distribution channel is 

30 both complex end involves many layers of different electronic pacxagec^ 

31 dist t md resell hi at t e a the c u t < 

32 o i n acx s os kmw rti t : electron transac r 
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1 Consequently, there is a need for an electronic distribution system for 

2 the Yx da variety 3 exist today, v in em cost- 

3 effect > stal dtes and < Kbly maintains r eff a d t 

4 degms of trust between the anient taginaton ai! layers of distribution and 

5 the consumers at digital goods, 
6 

? 

8 Summary , I 

9 Thus, a general purpose of the present invention is to provide lor the 
10 struct I t > 1 i t s I a 

1} This is achieved in the present Invention by providing 0 digital 

12 distribution channel management system that includes a digital warehouse 

13 storing different master copies of' digital goods awaiting transfer and a 

14 transaction database that stores 0 plurality of transaction records, A 

1 5 transaction server is provided coupieahle to o communications network, such 
t© as the Internet. The transaction server Is responsive to requests from Hie 

17 communications network to serve on instance of a particular digital goods. 

18 The request Includes predetermined information that is aufhenticafeabie 

19 against a predetermined transaction database record that stored in the 

20 transaction database. The transaction server provides far the digital signing 

21 of the instance of the digital goads and the serving of the instance back onto 

22 the communications network where the predetermined information Is 

23 successfully authenticated against the predetermined transaction database 

24 record. 

25 An advantage of th^p « h odes for the 

26 aggregation of many small transactions into unitary., cost-effective financial 

27 transactions, 

28 Anotbe advanto as s t esyst m a Ov.des 

29 for the establishment of universal trust relationships between any number of 

30 content originators, content providers, distributors and repackages, and the 

31 consumers. Additionally, these trust relationships are maintained through use 

32 of a comprehensive distribution system that en Forces the relationships and 
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1 thereby provides o highly credible support foundation tor the maintenance of 

2 these relationships. 

3 A further advantage of the present invention is that Hie system 

4 specifically supports anonymous transactions as o default structural 

5 implernentat fth c thereby p i va 

6 for She commercial users of the system. Control over the release of 

7 information regarding any transactions can be directly established as 

8 belonging to the consumer. 

9 Still another advantage of the present Invention is the? the 

10 oggreQCitionai -/ehide utilized by the present invention can be mods both 

11 tangible ond redistributable, A physical cord may be made the specific 

12 controlling entity that allows or supports the execution of an electronic 

1 3 transaction for the distribution of some digital goods, thereby allowing the card 

14 itself to be tra nsf erred between consumers. This redistribution ability directly 

15 provides for substantial flexibility to use the present invention in widely 

16 i iropiet < ' > i /distribution advertising.. 

17 and other promotional activities, ds well ds re-distribution as gifts, Incentives, 

18 subscriptions, and sponsored activities. 

19 ret another ad t ^ N ^ tb d > 

20 of the aggrsgatlonal vehicle, such as a card, permit use to be specifically 

21 defined on o pre-emptive basis. The effective financial value a^oi^ed to a 

22 card Is defined cod held by the system. Thus, the financial impact of the loss 

23 or mis-use of a cord is limited Farther, the promotional, sponsored, or other 

24 branding-type va I % ' > j ^ *' > „ 

25 the system by specification of the type, titles, categories, or other restrictions on 

26 the digital goods that con be electronically delivered through the use of any 

27 particular card or set of cords. 

28 Still another advantage of the present invention is that the effective 

29 f no si uk m > < 

30 i v 1 v. 3 > * x f s i s i i 

3 5 transaction or by a consumer transaction, such as the transfer of actual funds 

32 la the transactional account represented by the agqrcgotional vehicle. The 

33 potential also exists to allow the aggregotionai vehicle to support the 
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1 pggregotic of Iran t;on< t el maintain the % f rmatiam on 

2 account fund values provided by or through different promotional., sponsored , 

3 or other branding-type source transections. A single card may thus be able 

4 to be used as multiple virtual cards, each carrying thee own esagedimltodons 

5 or:d effective account balances, 

6 A yet further advantage of the present invention is that the 
? aggregotlonai vehicle may be also used in connection with the purchases of 

8 tangible goods. An electronic transaction based on a card may be sponsored 

9 or hosted directly or indirectly by a bneks-and-mortar retail site, 8y 

1 0 establishment of a channel -type relationship with the allocation of funds to the 

1 1 channel distributor for use in connection with the purchase of tangible goods 

1 2 and services, the distribution of digital goads may be constrained to occur only 
] 3 with the concurrent or prior purchase or use of some tangible goods, 

14 
15 

16 B «>f g ngs 

17 These end other advantages and features of the present invention will 

18 become better understood upon consideration of the following derailed 
\9 i v> he n dio I nect viO the 
2(3 a c mg i s referent He like pa 

21 throughout the figures thereof, and wherein: 

22 Figures U, Is, AND 1c generally depict, in flow-graph form, the 

23 relationships and transfers supported by the present invention in connection 

24 Oit, > ; > - - s, s v < ^ i t i t. ». ■>,■}> 

25 transactions in connection therewith; 

26 figure 2 shows t j of digital 

27 content as on electa: ■ j|j delH ■ I :i gltol goods In accordance with a 

28 preferred embodiment of the present Invention; 

29 Figure 3a illustrates the delivery of electronically deliverable digital 

30 goods, ;n accordance with a preferred embodiment of die present invention, 

3 1 to any of a number of different consume! devk es capable of uiilo no delivered 

32 digital goods; 
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1 igure 38 illustrates o clism utikofi shied a 

2 goods in accordance with a preferred embodiment of the present Invention; 

3 Figure 4 shows the system architecture of a distribution channel 

4 !3 CS v>i f » Q p K. J 

5 embodiment of the present invention;: 

6 Figure 5 shows a transact > \ < < en ca f 

7 and recording a transection reqnev in a? orda ti * 

8 embodiment of the presenl invention; 

9 Figure 6 shows an expanded security process flow for dynamically 

10 handling security- exceptions in the transaction handling process flow shown 

1 1 in Figure 5 in accordance with a preferred embodiment or the present 

1 2 invention; 

13 Figure 7 shows an expanded registration process flow for handling 

1 4 security consumer m > m the transaction handling process flow n 

15 ;n Figure 5 in accordance with a preferred embodiment of the present 

16 invention; and 

17 Figure 8 shows an expanded focus limitation and digital goods delivery 

18 management process flow for dynamically handling digital goods selection 

19 and transfer fulfillment In the transaction handling process flow shown in 

20 Figure 5 In accordance with a preferred embodiment of the present invention. 

21 

23 The present invention provides the structure and operation of a digital 

24 jisfributson cha % N % yt I N ^< in Figure 1 A A 

25 channel management computer system 1 2 preferably hosts a distributor 

26 commerce (D-Commerce) site 14 on the internet or other communications 
2? network to operate as a communications point of contort for requests for 

28 digital goods and management at the corresponding electronic transactions. 

29 v On amerce sif srehly implement* is high- 

30 performance Web server c i i \ n 

31 such as the Microsoft® Internet information Server '" (MS). 

32 Preferably, the computer system 12 stores digital goods as digital 

33 content files 1 6 in a secure storage device 1 8, effecting a digital warehousing 
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1 of available dl ital gc xis The secure store device 18 is implemented as a 

2 secure server system that includes a redundant array of hard disk drives fo 

3 ensure the data integrity of the stored digital content. The secure server system 

4 itself is preferably protected from unauthorized electronic access through the 

5 use of a secure operating system, which can be implemented at a minimum 

6 through us« he** < sN? >s< <k cute se - c; o 

7 Physical security over the secure server system is also preferably provided. 

8 These protections together provide a highly credible secure environment for 

9 managing the storage of the digital goods. 

10 The distributor commerce site 14 preferahl) ut>, a < a * gh-pt rfos mance 

1 1 transaction oriented database 20 to provide access to transaction and related 

1 2 account records used for authenticating distribution requests and recording the 

13 co espo sding ^< N 

14 hosted on a separate database server computer system, which can he readily 

15 implemented using Microsoft® MSSQl'* and Windaw-sNT'* file server 

16 operating system. 

17 Other components of the channel management computer system 1 2 

18 p eLtup . nc uae u ss-s 

19 a - ' t y -it m * - 4 
.20 The System management interface 22 provides local maintenance access and 

21 set of maintenance tools for use in operating the distributor site 14. The 

22 account management system 24 likewise generally provides a local user 

23 Interface and set of tools for establishing and processing accounting 

24 Information and providing reports of account activity by users of the channel 

25 rs t co N ^ 

26 Finally, a key generation component 28 is provided within the generally 

27 secure environment of the channel management computer system 1 2, This 

28 key generation component 28 is operated preferably though the system 

29 management user interface 22 to produce and manage a collection of keys 

30 o^eta v d- ♦ * n 1 i ^is^V 

31 that are to be used In conjunction with the authentication of distribution 

32 requests as received by the distribute site. 14, 
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1 5 l m onteotp ov ders sU 

2 which may include content originators directly or indirectly as represented by 

3 agents and other entities that hove the legal authority to engage the 

4 d nl n tnd sale digital c n xiiment 

5 of she present invention., the digital content 16 is digitized music tracks 

6 (individual songs' and collections {digital albums). The relevant content 

7 providers therefore include musicians, their contractual agents,, and the many 

8 different music studios. The contractual rights fo •> obtained 3S 

9 on behalf of the channel management compute; system 1 7 in a conventional 

10 manner. The actual digital content 16 h thereafter obtained through any 

1 1 number of different forms of digital transport 34, provided that the transport 

12 34 : secure 36. A a eh i fed form of secuso dsgha ! transport 34 is through use 

13 of on encrypted digital transfer over the Internet. One such form of secure, 

1 4 encrypted transfer 34 is provided utilizing the Netscape® Secure Sockets Layer 

1 5 (SSL) . An additional layer of security may fee provided by requiring the tra nsfer 

16 to be n ad * e * 

1? thro gh the use at beat > 1 m opt >o feature of SSI A 

18 private communications network, may also be used, alone or in some 

19 o ' i i*i N < > ^ " t < t > < < ' ! L " - gi 

20 use of a fixed, tangible digital medium, such as a compact disk (CD), may 

21 also be used, 
22 

23 their content is accurately and actually delivered to the channel management 

24 computer system 12. The reliability of the transfer of she digital content 16 

25 thus forms a substantial credible basis for maintaining the trust relationships 

26 between the content providers and the operator of the channel management 
2? computer system 12, 

28 Digital content 16 is available for distribution by the channel 

29 management computer system 1 2 preferably through the distributor commerce 

30 site 14 received through o general ly secure digital transport medium 38. 

3 1 Requests for distribution ore received generally in relation to any retail site 40 

32 or e-commerce site 42 that has established a distribution relationship with the 

33 operator of the channel management computer system 1 2 . This relationship 
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3 
4 
5 

7 
S 
9 

10 
1:1 
12 
13 
14 



1? 
18 



21 

22 

23 
24 

25 
26 

28 
29 
30 

31 
32 



may bed eel or object *nrougr a thr J pasty the* ha j\U* f 

a direct relationship with the operator of the channel management computer 

system 12 

As generally shown in relationship to the retail site 40, the relationship 
may be established as a hired relationship 44 or through o promoter 46 as 
an indirect relationship 38, As a result of the relationship with the operator of 
the channel management com 3 o vehicle is 

provided to a consumer,. As sho <m on ,! m t > «t o x th 

present invention, a tangible card 50 is issued to o specific consumer. 
Whereas the generalized aggregation vehicle is logically denned by certain 
data,- the cord 50 provides a convenient physical representation of essentially 
the same data. For a preferred embodiment of the present invention, Table 
I lists the pertinent data represented,, if not explicitly printed,, on a card SO, 

Table . I . ~. . Card . Data 



Data Type 


Description 


Sponsor 
Personalization: 


An advertising -type graphic and/or logo typically 
covering the front of the card. 


Series Number; 


An alp u > f 'i J> ^ >vx a t a 
svifh a particular promotion, sponsored event, 
subscription,, etc. 


Card Key: 


A unique number identifying the cord. 


PIN; 


An identification number usable to verify the authenticity 
of the Cord Key. 


Sponsor 

i r o 1 


Name and optionally the real address of the promoter or 
sponsor at this card series. 


notion 

Site: 


One or more Web addresses that allow a selection of 
some d joods and options oi pad 
or all of the allocated monetary value of a card as part of 
to a * a; v V, - * ,ee i 


initio 1 Voice: 


1 J ! > i ^ 3 

Optional. 
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Descrtotion 


1 


Expira?;on 


A promotional offer or use termination date for this card. 


2 


Date: 


Optional 


3 


Tola; Use:;: 


A subscription limitation on the total number of 


4 




- , m allowed for this card. Optional. 



5 



6 A card 50 is preferably presented 52 to a caress >nd 5 tail sib 40 

7 through an access of a public redemption Web site hasted by or on behalf of 

8 the retail site 4 > d typical h ie the Web page Identified on 

9 i v dan lers that a 1 e c.o 1 ect f 

tO goods. One of the Web pages will preferably support the Identification of the 

11 ; ' - . x y Mn» ou-.dPlil i^tu 1 

1 2 the card 50. With the selection of a 'submit' button, the consumer would then 

13 p< v * ' ! 11 n 3 M a 3i 3 I x 

14 Jn" a n ^ 1 ^ ' < 

1 5 of the present Invention, this page, though appearing as one of the Web pages 

16 hasted by the retail site 50, is o Web page hosted by and as part of the 

1 7 distributor commerce she 14. in this manner, the selection and cord daks 50 

18 is securely submitted directly to the distributor commerce site 14 for 

19 authentication and, as a pp it 

20 The fulfillment of the distribution request is dependent on a number of 

2 1 requirements, including validation of the card key and FIN, verifying that the 

22 card distribution request is within the expiration date or number of uses 

23 < e card * v the selected I 1 is c svuilablef 

24 redemption against the corcj. This soi oi requirements Is variable based on 

25 the program or profile of such requirements that is established by the retail site 

26 40 or promoter 46 for 0 particular series of card?. 50. That is, the relationship 

27 established vaho 5 s nanogemen 

28 computer system 12, the retail site 40, and the promoter 46 is used to 

29 establish, on a per series basis, a set of qualifying requirements for the 

30 redemption of the card, These transaction rules are stored In the transaction 
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1 database 20 in effect as a set of business rules that are evaluated upon receipt 

2 of each distribution request. The series numbers of the cards preferably 

3 provides for the segmentation of k hi j for the 
A corresponding sets of cords 

5 Provided that fulfillment Is approved, an instance of selected digital 

6 content 16 is securely signed based on o unique key provided from the key 

7 generation component 28. The resulting packaged instance of the selected 

8 digital content, representing verifiably deliverable digital goods., is then 

9 electronically transferred to a digital content store/player be designated by the 
10 consumer for receipt of the selected digital content. This player 54 preferably 
1 i includes a processor, content rendering engine., and memory that together 

1 2 provide for the storage and presentation of the digital content. In a preferred 

13 embodiment of the present invention, the player 54 is a conventional 

14 consumer's personal computer. Where the digital content 16 is some 

15 combination of audio and video, a conventional multi-media equipped 

16 personal computer is fully capable of performing the rendering and 
\7 presentation of the digital content 16. 

18 The use of the present invention in connection with e -commerce cites 42 

19 is generally similar to the use in connection with the retail sites 40. £■■ 

20 commerce sites 42, however, generally only exist In cyberspace - there is 

21 typically no reolspoce presence as in the case of retail sites 40 - and therefore 

22 * s > as public Vv'eh sit < > > Po fit ;rne 

23 56. These e -commerce sites 42 preferably establish relationships with the 

24 operator of the channel management computer system 12 to allow the sites 

25 42 to acquire an » « * v u> * och as the cord 50. These 

26 cords, may be vended over the Internet 56 by anyone one with c directly or 
2? indirectly established relationship with the operator of the channel 

28 management computer system 12, Thus,, the promoter 46, other reseller or 

29 sponsor, or even a gift giver 58 can provide the card to a digital goods 

30 consumer either directly or through on electronic transaction over the Internet 

31 56. 

32 As before, the redemption or a card 50 for digital goods occurs In 

33 connection with selection and ordering Web pages that at least appear to be 
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presented or hosted by the ©-commerce site 42, Subject to the appropriate 

;, > ca an i volidat " v gha sainstt -e ^ a 

the digltc; goods are tra > ? > v m 'pWu? 



5 
6 
? 
8 
9 

10 

11 

12 

13 

14 
15 
16 
17 
18 

19 

20 
21 
22 

23 
24 
25 
26 

27 
28 
29 
30 
31 
32 



The flexibility' of the present invention to provide far a rich set of 
cav^-io k me o < ^ tip - p ^ >. ^ s *h 

electronic tra mu om the exemplary 

processes generally shown in Figures IB and tc. The different business 
models generally represented in these figures are summarized in Table H 
below. 





Model Descriofion 


Sponsor: 


An advertising sponsor of goods or services underwrites the 
distribution of cords with assigned values, focus limitations, 
etc, to introduce the goods or services or to create and 
increase brand awareness of the sponsor and other related 
goods and services. 


Promotion: 


A promoter of some goads or services sponsors the 
distribution of cards In connection with the purchase or use 
the promoted goods or services, thus creating or 
supporting an advertising tie-in campaign. 


Affinity: 


A promoter of on event or product introduction sponsors 
the distribution of cards to encourage consumer sampling 
and acceptance of the event or product and to purchase 
and e purchase the related good? and services. 


Subscription; 


A promoter or originator of some serial content distributes 
cards to establish en ongoing relationship with consumers 
for the ser;ai content, while constraining the repeated 

^ v N m v % -m , (Km* 1 i I 
defining s peered us« 
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Table M - Business Models 


Usuc|ejvk>dei 


Mode? Description 


Reporting: 


A manager of a program involving the access or 
employment of some content by a definite set of users may 
issue cords to define access and usage parameters thai 
con then be reported to She manager. 


Combination: 


Any combination of the above or other similar usage 
models. 



7 

8 For o promotion or sponsored model, the system 70 shown in Figure 

9 Is provides o distributor site 14 that operates as the entry point to an 

10 embodiment of the Internet distribution control system 12 of the present 

11 invention. Based on relationships with particular promoter sites 72 and 

1 2 providers of focused content 74, a promotion or sponsored distribution 

13 campaign can be organized and controlled through the operation of the 

14 Interne; distribution control system 12. The specific focus limitations to be 

15 employed for any particular series of cards 50 Is preemptively established in 

1 6 conjunction with the promoter site 72, which in fern is selected to advance the 

17 objectives of the promotion. The cards 50 may be distributed through retail 

18 , s em 7 8 as a specific inducement for the end- 

1 9 users 78 to visit the retail outlets 76, as necessary to actually obtain a card 50 

20 such as through the purchase of some other product or service of the retail 

21 outlet 76- 

22 Since the cord 50 for a particular promotion activity can only be 

23 obtained from specified retail outlets, end only in conjunction with some other 

24 specific activity, the promotion opportunity retains the specific feces not only 

25 os desired by the promoter 72, but fully consistent with similar conventional 

26 promotion oc < th c Using campaigns * 

27 theongine iuf< particular good sn digit? ntet 

28 p ^^i' nvs ntior ! 

29 campaign by minimizing the complex Involvement of the individual retail 

30 ou'ot? 7c -aspc 

31 the specification and enforcement of the promotion redemption activities con 
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1 3 3 ) 9 > eot system 1 2 while at lea 

2 mai « ' cess c eiy within the 

3 bra c 1 * ling and 

4 bearing the consumer's trust of the promoter's brand. Furthermore, the off- 

5 th I , i f t tribebon cent 

6 1 2 only increases the tangible cost-effect ivenuss of the promotional campaign 

7 end the intangible credibility of the Internet distribution control system 12 to 

8 i She red a >o sformatian and en Mi - 5 v ! 

9 goods are provided m the f u Hi i Sment process. 

10 The source/subscriber system 90, as generally shown in Figure lc, 

1 1 further demonstrates the variability of use of the present invention, in this 

1 2 exemplary case, the Interne? distribution control system ] 2 may be used by a 

13 < •> star °? m a nited role t % rd i 

14 manogement/%ifiliment house. The content % < 3 in 

15 accordance with a preferred embodiment of the present invention., fully has! 

\6 a n ^ , * > > > ii 

1/ indirectly as self-determined to the end- user/subscribers of the content 

18 source/originator 92. In this case, the digital content produced by the content 

s9 a . gi jtof 92 may be provided through a focus content provider 74, 

20 as shown, or directly to the Internet distribution control system 1 2 tor use in 

21 subs t 1 Ibutor site "14 therefore of 

22 merely as a source of cord 50 series to the conteni source/originator 92 and 

23 as a limited parte i for the distribution of the corresponding digital content in 

24 - 1 n the content sourcs/origina 

25 site 92. The actual and perceived relationship between the end- 

26 user/subscriber and the content searce/oaginotor 92 is therefore direct and 

27 real The internet distribution control system 12 and distribution site 14 

28 transparently operate as a trusted digital distributor to the content 

29 source/originator 92. 

30 in bath the systems 70, 90, the present invention supports the targeted 

3 1 objectives of the business models used by the promoter 72 and content source 

32 92 by supporting the constrained fulfillment of redemption requests. The 

33 Internet distribution control system 1 2 not only provides for the authentication 
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} of t i« cc ds SO ' r option but also provides 

2 tor the limitation of : the redempiion lo predefined, or focus selected digital 

3 goods. For example, a promotion targeted to a specific audio artist's works 

4 Is desirably focused on just that artist's body of works The present invention 

5 provides, through the operation of the internet distribution control system 1 2, 

6 i > , N k p ^ m ■* v 

? goods. Thus, a fully authenticated card 50 may yet be denied for a particular 

8 selected digital goods, where the goods are determined by the Internet 

9 distribution control system 12 to lay outside of the defined scope of the 

10 particular promotion for which the card 50 was distributed. There is, however, 

1 1 q substantial degree of freedom in how the scope of a promotion Is defined. 

12 For any promoted activity,, works, or even digital goods,, the scope of the 

1 3 promotion may be defined along any categorization line or genre that can be 
i 4 defined by a set of business rules executable by the uemet distribution control 
15 System 12. Thus,, the promotion of o specific ''blues' recording artist may yet 
\6 allow redemption of digital goods that (1) are by that particular artist; (2) are 

17 blues recordings owned or cant ed by the artist's record labs 3) ore blue? 

1 8 or jazz recordings, blues or jazz musical videos, or blues-type .movies that are 

19 owned or controlled by the promoter's studio; or (4) relate to some other 

20 digital goods product that Is desired by the promoter to he fled to the artist's 

21 name. 

22 in acco> ' - t ideation, 

23 the digital content packaged and delivered as digital goods Is a composite of 

24 multiple individual instances of different digital content. As generally shown 

25 in rsgure 2, a process of digital packaging 100 is preferably employed to 

26 produce o digital goods 102 that is suitable for distribution and capable of 

27 maintaining the trust relationships between the content providers and 

28 distribute, by presenting a highly credible basis dv ensuring that the digital 

29 *~ \ * > d , or copied for resols 

30 sodis fio m d > - i) sfe sbh as ary e that a tains 
3) the full content associated with a particular distribution license. In the case of 

32 music., single tracks, sets of tracks, or entire albums are often defined as 

33 Individual Hcensoble entitles. Alternately, a specific recording of a song and 
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1 o corresponding music video may constitute the licensabb entity . in any of 

2 these cases, the corresponding digital content representing the licensable entity 

3 is treated in the packaging process 100 as digital content 104, which is 

4 subjected to a highly-secure digital packaging, encoding end encrypting 

5 operation ] 12, 1 14 There are mony different suitable encoding processes that 

6 are commercially licensable. In at least the initially preferred embodiment of 

7 the present invention, the digital encoder/encryption process 114 is on 

8 implementation o n I iwstenp v rsmsrclo 

9 ave sbls t m - fornia. In 

10 ptJtnwi embc llment of 1 

1 1 software system is utilized to initially package the d;g da I content 1 04 with some 

12 1 i >g operator- s> i ex content 106 s he d cripti 

1 3 digital content 1 04. This software system is obtainable from Preview Systems, 

1 4 Inc. , Cupertino,. California - 

3 5 In accordance with the preferred embodiments of the present invention, 

To however, additional content, such as binary content 108 and text-oriented 

17 content 1 1 0 is also ps 4 a to t llpitrd packa 

IB process 100, The binary content 108 may include graphics, icons, applets, 

19 programs, and other material typically represented as binary images. In 

20 connection with a music album, for example, the binary content 108 may 

21 simply be the cover onO related art originally released with the album compact 

22 disk. The binary content 108 could also include a computer Installable icon 

23 thai is used to represent the album within the blesystem of the computer and 

24 an applet that p I is and related tie - as the album is 

25 ployed. The ability to include a program within the binary content 1 08 would 

26 allow concurrent distribution of a demonstration gome or other application 
7? program. Alternately, the included program could be one or more "plug-in" 

28 co * « > i % i ce or add to the 

29 listening or viewing experience of the digital content 1 04 . 

30 The text-oriented content 1 10 may also Include a number of different 

31 text entitles, potentially N * N t*> formats. For example,, o plain text 

32 copy of the liner notes of on alburn could be included In the content i 1 0. The 

33 !> cs of the different sc lb night a! be inclu no n 
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1 text format oppropriot© to be rend and displayed by on applet included as pert 

2 of the binary content 108 or provided as part of on XML (extensible markup 

3 language), HTML and/or JavaScript 1 * file stored os still of her textual content 

4 110, Other XML and/or HTML files,, stored as textual confer** 110, may 

5 provide additional information mgma.ng m<= album and :;.■">' do various 

6 hypes nc->1 hnks to Web sites where adrfnonel relevant information may be 

7 obtained, thereby enhancing the end msec/consumer's experience and 

8 perceived value of the digital goods obtained through uses of the present 

9 invention. 

10 The digital packaging 112 of she different digital,, binary, and textual 

11 content ;04, <~ 1 10 preferably provides for the organization of the content 

1 2 info a composite, transient document that is then further packaged to pr oduce 

13 * if « ocds fsie b N t } t 

14 different Input content 104, ]06felO8 ( 110 Is preferably numerically 

1 5 compressed using conventional algorithms appropriate for the particular type 

16 of content, in the cose of content where lossless compression is required, 

1 7 implementations of the Lempei-Zev- Welch (IZW) or other similar algorithms 

18 may be used, Graphics and other similar types of binary images may be 

19 compressed using JPEG or other similar types of lossy compression, 

20 ppropr ■) > ? N< us content is 

21 organized and placed into the digital goods fie 102. This Hie 102 preferably 

22 o >n idea i a dig 3? * > I s 

23 identifier 116 may be variously used to identity, directly or indirectly, the 

24 specifics of the digital packager and encoding 1 12, 114 and, therefore, how 

25 the hie 102 may be properly Interpreted and parsed when subsequently 

26 examined for use by a content player. The digital signature 118 is used to 

27 provide, at a minimum,, a basis for subsequently confirming the integrity of the 

28 digital goods fie ; 02. 

29 In a preferred embodiment of the present invention, the digital goods 

30 fife 102 then contains an infernal component 134 that includes on XML 
3 ) document 1 20, on object locators block 122. and an objects block 124. The 

32 XML document 1 20 Is constructed, at least in port, through the operation of the 

33 digital packager 1 12 to 'include an appropriate description or identification of 
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1 'he various other parts of the component ] 34. Thus, the XML document 1 20 

2 preferably Includes XML references to the objects the content 1 08,. 110 that are 

3 <~ r i H s part of 1 3 KML referen 

4 however, would conventionally identify additional external documents and 

5 files. The public XML standard, os developed and published by the W3C 

6 (World Wide Web Consortium), does not provide a mechanism tor the XML 

7 references to point back to the same fib component 1 34 that contains the XML 

8 document 120. This is consistent with the conventionally recognized and 

9 intended uses of XML :n connection with the organisation and preservation of 

10 distributed information across on open communications medium, such as the 

1 1 Web. 

12 In connection with the present invention., the organization capabilities 

1 3 provided through the use of an XML document as conventionally defined is in 

14 tension with the need to provide digital goods through electronic transactions 

15 wish certainty that the entirafy of the digital goods are both transferred 

1 6 completely and remain properly organised for ready use by the &nd~ 

17 user/consumer, 

18 The present Invention., therefore, provides the XML document 1 20 with 

19 the additional ability to self-reference the file component 134, even as 

20 imbedded within the dig < >.s 

21 step 112 of compositing the various content 1 04, 108, 1 10 provides for the 

22 creation of an objects locators block 122 within the component 134, The 

23 objects locators block 1 22 provides a table of offsets or other pointers to the 

24 lift t y j erived ihroug in > - n /content 

25 108 and textual content 1 10, Thus, parsing of the XML document 120 In 

26 connection with the objects locators block 122 In accordance with the present 

27 Invention allows ail of the objects 124 be separately identified even while 

28 digitally packaged into a single digital goods file 102. 

29 Once the digital goods tile 102 is fully composited, the digital 

30 poo-aging step 1 12 operates to prepare a digital signature that covers the 

31 ©m posited 02. P i pods f 2 is $ .'a 

32 through a digital signature generator provided as part of the 

33 encoder/encryption 1 1 4 to produce a dinar)' string that securely represents the 
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1 contend of the file 102 . in a preferred embodiment of the present invention, 

2 the digital signature generator 114 includes a conventional software 

3 component implementing a public key encryption algorithm. At least the core 

4 secure public key encryption engine,, as used by *U t ^ynaSire generator 

5 114, h commercially licensabie from conventional software vendors. For the 

6 preferred embodiment of the present invention, the digital signature generator 
? 1 14 utilizes a Secure! D ' public key encryption component,, which Is a pebtich 

8 licensabie product of RSA Security, inc.,. San Mateo, California. 

9 Since the generation of the digital signature is based on a public key 
10 encryption algorithm, the generator, 114 also lakes as inputs a private key 
H wf-'pfl tftbu on i v i * 

12 the particular instance or series of instances of the digital goods 102 and a 

13 public key 130. As a product of the signature generation process 1 14. a 

1 4 second private key,, which is used to form the basis of a separate digital license 

15 132, is also generated. Finally, the binary signature string produced by the 

16 digital Signal generator is then 'V \o. signature field of the digital goods 

1 7 file 1 02. At this point, the completed instance of the digital goods file 1 02 is 

1 8 ready for electronic transport to an end -user/consumer. 

19 A preferred process 140 of providing for the distribution of the digital 

20 goods file 102 is shown in Figure 3a. A fully prepared instance of the digital 

21 goods file 102 is passed through the distributor site 14 by the internet 

22 distribution control system 12 to the Internet 142 us part of a conventional 

23 iHTt? transaction. The destination of the digital goods file 1 02 Is generally any 

24 content store/player that is designated by the consumer unci that is available 

25 to participate, directly or Indirectly, in the HTTP transaction. Suitable content 
2d store/players include multi-media equipped persona! computers 144. digital 

27 content audio players 1 46, 1 cider digital a*> > players and digital 

28 appliances 148, such as digital personal assistants (PDAs) and digital books 

29 that can store and present digital Information. The actual HTTP transfer of the 

30 digital goods file 102 Is preferably performed using SSL to ensure that the 

31 transfer of the digital goods file 102 and, separately, the digital license file 

32 1 32 are both delivered to the consumer without interception by any third party. 
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.1 This process of distribution 140 m< > > s t pi f eel /pre t * he 

2 actual digital goods file 102 to be prepared and delivered to a consumer 

3 epara t tt * o < I s r ?s N ilrl 

4 V to < < < 1 i j<< j 'delivery mechanisms may be employed to deliver the 

5 d:gstoi goods life 102. For example, o physical compact disk containing any 

6 nurs-iber of dirts re* i ed or othen 

? delivered info the possession of a consumer, potentially as part of a 

8 promotion. Digital goods files 102 may also be prednstalled in a newly 

9 j rsulti -nedio ompute sys ten fh of ods 

10 also be provided on software CD-ROMS that are purchased by consumers 

11 pure or the solvate $ q m content Alt , a i ods 

12 102 may be streamed over the internet to the consumer. As pari of a digital 

1 3 stream,, the digital goods file 1 02 is only transient y stored by the consumer. 

14 In all of these cases, the absence of a valid digital license precludes the content 

1 5 of the digital goods file 1 02 from being accessed or limited to a short preview 

16 of the content, 

17 A generalised digital content stare/player 150 Is shown In Figure 3B. 

1 8 The content store/player 1 50, in accordance with a preferred embodiment of 

19 the present invention, Includes a microprocessor 152 is capable of being 

20 uniquely identified, such as by the presence of a hardware identifier' iulD) 1 54 , 

21 and a storage system 156. at least logically facoi to the microprocessor 152, 

22 that Is capable of storing some number of digital goods files 1 02 and the 

23 'r!i«. 'V 5 . •■ n a " ' 11 f 

24 some combination of audio stream renderers, such as hardware audio 

25 decoders 158, and speakers 160, video stream renders, such as hardware 

26 video display controller 162, and display system 164, depending on the 

27 intended use of the player 150. in addition, other stream dote renderers 166 

28 and corresponding presentation units 1 68 may be provided . These additional 
39 renderers may provide for the presentation of other sensor data, such as force 
80 feedback in gomes, and sob-sonic vibrations and environmental lighting 

31 modulation in conjunction with, for example, live concert recordings and 

32 action movies. 
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1 The microprocessor 152 preferably execute? on Ppplicoilon program 

2 that implements the software processes 1 70 that provide tor the processing est 

3 the digital goods file 1 02 . Specifically,, the software processes 1 70 provide an 

4 XMl object server 1 72 that supports accesses by an XML parser 1 74 to select 

5 arid retneve the constituent ports of the digital goodsfile 102. In the preferred 

6 embodiment at the present invention,, the XML object server 1 72 provides the 

7 bridging Mndionoiity of an essemioliy conventional XMl parser at the core of 

8 the parser process 1 74 to be able to access the object locators block 1 22 as 

9 corresponding XML references are parsed from th x ^ , < t !'20 has 

1 0 the XML object server performs a redirection function as needed to support the 

1 1 XML parser 1 74. All of the component pads of the digital goads file 102 are 

12 therefore made available to the software processes 170 under the 

13 organization of the XML docurnsnt 1 20. 

14 Preferably then,, the software processes 1 70, following from the parsing 

15 of the XML document 120 provide for the processing of the digital content 

16 104 . binary content 108- and textual content 1 1 0, present in the digital goods 

17 file 102, As needed,, the software processes 1 70 invoke HTML parsers 1 76., 

18 audio decoders 178., and video/binary image decoders 180 to process the 

19 content 104,. 108, 110 to a level suitable for presentation to the hardware 

20 Tenderers 158, 162, 166, Additionally, the software processes 170 can 

21 recognize and, as appropriate, utilize audio and video plugum 182, 184 to 

th« p s the content 104, 108, 110 prior to being passed to the 

23 tenderers 158, 162, 16a. These software plug ens 182, 184 may be 

24 independently or separately introduced snto the player 15(5. 

25 Alternately, the plug-ins 182, 184 may be provided as pad of the 

26 binary content of the digital goads 1 02. In this cose, the XML document 1 20 

27 ^ \ - i I f t i th i - <. 

28 ins and permit the software processes 1 70 to appropriately toad these objects 

29 mto the execution memory space of the microprocessor 152. Once loaded,. 

30 the microprocessor 1 52 preferably operates to Initialize the plug-ins 1 82, 1 84 

31 into the software environment of the software processes 1 70, 

32 them* 41 - ' n r < ; f it ' < < o~nrMys*em 

33 ! 7 s v N > * er system 
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1 92, a set of- user interfaces 1 94,. end a secure bussnessrto-business interface 
; 96 to a financial service provider. The secure server system 192 may make 
use any o> iiffsrenf commercial e-commerce <■ - ■ ms that ore 

now widely available through established vendors or provided by hosting 
services, in a preferred embodiment off he present invention, the secure server 
system 192 includes a s j{ •> - u asaff HS hosted 

on a WindawsNT C < I f il# platfon ded I >d 

a conventional internet firewall that provides the network secure environment 
of the secure server system 192. The internet server 1 98 may host and execute 
on instance of the internet firewall application* 

The internet server 198 is preferably used to process internet 
transactions related to the authentication, digital goods selection, card 
redemption accounting, and digital goods electronic transfer fulfillment, A 
database server 200 Is preferably provided fo support database access against 
an accounts database 202 used fo store the card account and related 
information. For a preferred embodiment of the present invention. Table Hi 
lists the general account information stored by the accounts database 202, 

Table Ji, -JStsese&ksfc} ! . ' 



■Oo.'ouni 

v"ifn N 


A^puht information Description 


Sponsor ID: 


Information identifying the sponsor and sponsor program. 


Serbs 
Number: 


An alpha -numeric identifier of o set of cords associated with 
- t , „ ( < n 


Card Key: 


A unique number identifying the card. 


PIN:: 


An identification number usable to verify she authenticity of 
the Card Key, 


Redemption 
Profile;' 


Identification of the profile or profiles that con be evaluated 
in determining whether any particular use of the card Is 
allowable Initio!!) onl> s single profile is rec gniz< 1 


Current 
Value; 


identification of the current monetary value of the cord 
against each of the available profiles far this cord. 
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Account 
;t 


Account jnfotf" 


Expiration 
Date: 


A promotional offer or use termination dais for this account 
relative to n 1 - ; 1 es for r 


Total Uses: 


The curver-l total subscription uses or redemptions to-" each 
j ailab o profile for this cord 


Theacco 
reioteci profile i 
dotal: ss< -to 


unts database 202 is also preferably used to store the account 
^formation. A summary of the prof.ie snfoi motion sto-ec! «n the 
s provided In Table IV. The account information and profile; 



information is thus available to the internet server 198 in determining the 
authentication and authorization status for any particular redemption request 
received, 



14 
15 

16 
1? 

18 
19 

20 
21 
22 
23 

24 
25 
26 
2? 
28 
29 



Information 


Aecoun! Information Descriotion 


Sponsor 
ID: 


Information identifying the sponsor and sponsor program. 


Cord Serbs 
Number; 


An alpha nun < I 

a particular promotion, sponsored event., subscription, etc 


Profile ID; 


An identifier of a particular promotion, sponsorship,, 
subscript ill ?f f an 
authenticated cards for the redemption of allowable digital 
goods. 


Business 
Rules; 


A set of business rules and requirements defining the 
allowable uses of a card with respect to bus profile. 



A c \i stars y p o\ ded a-^ - 

digital content thai Is to be distributed by the server system 192. Thus, as 
redemption requests ore approved for fulfillment, the database server 200 is 
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1 l f < Hzed sin the n ontentfrot the ontenf si 

2 An internet server 206 may he provided to separately support 

3 administration functions necessary to motnloin and obtain reports from the 

4 secure server system 192. The Internet server 206 may be implemented 

5 utilizing essentially the same software and hard ward components as the server 

6 198. 

7 A key management server 208, key database server 210, and key 

8 database 2 1 2 is also preferably provided in ihe secure server system 1 92, This 

9 key control subsystem 208, 210, 21 2 operates to produce and manage the 

10 secure storage of at least the private encryption keys that are used in the digital 

1 1 signing and licensing of the digital goods electronically transferred out of the 
1 2 secure server system 1 92 . The key management server 208 is responsi b ie fa r 
"1:3 generating the private keys, which then can be stored through the database 

14 server 210 by the key database 212- These generated keys can then be 

15 provided on a transactional or as needed basis through the database server 
to 200 for storage,, directly or indirectly, against the account records in the 
1 ? accounts database 202. A key management and control user interface 214 

18 is preferably provided within the secure server system 192 to operate, as 

19 needed, the key management server 208. 

20 In o preferred embodiment of the present invention., the secure server 

21 system 1 92 is used to support Web sites that are public, as in the case of the 

22 s N I •> $ ied, such as the remote administration 

23 Web site 224, which can be used to support secure sites '! 96 , such as the card 

24 recharge site 226. The retail she 220 supports a conventional Web page type 

25 user inf* 5 1 ho [ion and ordering 

26 The information collected regarding the consumer, including the aggregation 

27 vehicle information, and the digital goods selections requested by the 

28 consumer are preferably submitted through a HTTP transaction gateway 230 

29 to the internet server 1 98 at the secure server system 1 92. 

30 Administration functions ore preferably performed through the 

31 administration site 224, which operates a HTTP gateway 232 to the Internet 

32 server20b used to support the externally allowed management, maintenance, 

33 and control aspects of the secure: server system 192. Interaction with the 
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1 administration Web site 224 is supported through o conventional W#b page 

2 type user interface 234. 

3 !n accordance with a preferred embodiment of the present invention, 

4 the recharging of the aggregation vehicles >erm it! eg the us< I e 

5 secure 

6 recharge site 1 96, For example, a consumer may be permitted by the profile 

7 associated with a card to add monetary value ic die card. Thus,, from the 

8 retail site 220, the consumer is permitted to access the secure site 226 and 

9 perform a supported HTTP transaction through a financial services gateway 

10 236 with a third party financial services provider (FSP) 238. This transaction 

1 1 is typically a credit card charge transaction. On completion of the credit card 

12 charge transaction, another HTTP transaction through the financial service 

1 3 gateway 236., directly or as shown indirectly., communicates updated account 

1 4 information to the administration Internet server 206, Corresponding account 

15 records in the accounts database 202 cert then be updated as appropriate to 
id reflect on increased account value fo r u 

1 7 Promoters and other parties provided with suitable access rights to the 

18 m 1 : c * j m -j profile records 

19 stored by the accounts database 202, Promotional values, new profile rules. 

20 extensions of expiration dates, and other aspects of the promotion, 

21 sp j )s< sh i v it tion, or other programs being run through the secure 

22 «\ «■ m 1 i t 

23 t bed as pari of fine i 

24 between th Hties, < 1 r»o and the operators of the secure server 

25 system 192. 

26 A preferred process 250 of authentication and electronic transfer of 

27 digital goads Is shown in Figure 5. The process 250 is initiated in response to 

28 the submission 252 of a redemption request,. This request preferably Includes 
22 a key, PIN, a selection (SKU#), and a selection corresponding redemption 

30 value. Other data submitted may include a transaction identifier,, and a 

31 consumer supplied message or identifier. An account lookup 254 is then 

32 performed. Where the key is not found, a notification message 258 can be 

33 returned to the consumer. If the PIN is determined 260 to be incorrect, an 
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1 onn-ys s "M r* vv, e n> mr ; e 

2 performed to determine whether a fraudulent use is being attempted. Where 

3 i - ' ( >64 is accounf, as 

4 represented by she cord, may be deactivated 266. Otherwise.,, on appropriate 

5 notification message may be provided to the consumer. 

6 If the cord corresponding a f b suit * \ 3 the 
? consumer may be so notified 270. In addition, it permitted by the 

8 :o espondi gacco nt profile, thn otit h imo) N k onsumerwifh 

9 an option to recharge the account The active status of the promotion, 
1 0 subscription., or other activity represented by a card 272 is then checked. II the 
1 ? states is determined to be inactive, o corresponding error notification 274 is 
12 provided to the consumer. Similarly, the expiration date of the particular 
?3 account, as represented by the cord., Is then checked 276. if the card has 
14 expired, which may be promotional mechanism used to require the consumer 
\5 to revisit some retail site or store ta have the expirai iate i tied a 

16 corresponding message 278 fe generated and provided to the consumer. 

17 Once the account as represented by a particular card Has been 

18 authenticated and authorized for redemption of the value of the specified 

19 digital goads, a transaction against the relevant account record ss begun 280. 

20 In o preferred embodiment of the present Invention, a header record for the 

21 transaction ! 1 tten k « \i - u s "\ my failure c 
2:2 the header record write, the transaction Is terminated and a corresponding 

23 sss ! * smer. Preferai eqt ine item 

24 record 286 end an updated account balance 288 is -written to the accounts 

25 3 s any ta s u?e in v s t 

jsults in the transaction termination and a corresponding 

27 s es o > semes. 

28 In a preferred embodiment of the present invention, an electronic 

29 censing and transf .a ed ? s ^ ! P electron . <• - 

30 of the digital goads to the consumer. The presently used package is available 

31 under th net nan u a lob!« r license 

32 from Preview Systems, inc., Gupartino, California. Thus, offer the accounts 

33 database 202 is upd > te sw account balance 288 3 correspond \ 
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1 oothorfeotlon code Is generated and used as the basis for initiating the transfer 

2 o* me digd is then also transferred 292. 

3 Since the transfer package operates as an mdepervdent serve! application to 

4 t 3 < a ( edsg t ns the process 250 

5 is considered complete 294 once the transfer package has accepted the 

6 authorization code. 

7 An enhanced security operation for the process 2 50 ss shown a- greater 

8 detail in Figure 6. The enhanced security process 300 may he invoked in the 

9 process 250 in place of or in addition to the an w-, rt« - 3r : e ~a»e - 
10 any security heck 302 may be pes a d >re 30 

] 1 the failure history of the particular account, series of cards., or related set of 

1 2 promotion profiles are checked 308 for patterns of mis-use. For example, rate 

13 of failures, or failure velocity, may be .analyzed 310 to determine whether an 

1 4 organised attack is being made to fraudulently authenticate an account that 
I S then can be used to improperly obtain access to some digital goods. In this 

16 case,, various threshold criteria con be applied to detect patterns and 

17 determine whether any velocity limit has been exceeded 312. If a limit is 

18 exceeded., the account is deactivated 314 and the consumer notified 

19 accordingly 3 1 6. Otherwise, where either no security failure is noted 304 or 

20 a m it is not exceeded 31' 3 s * 5 accounts 
2-1 database 202, directly or indirectly, so as to permit subsequent evaluation 

22 against the account, series of cords, or related set of promotion profiles 

23 ons -Mm* - urlty < he k ( 2 

24 The authentication and electronic transfer of digital goads process 250 

25 preferably operates o Jy with respect to the actual consumer using 

26 any particular aggregation vehicle. Specifically, the authentication is 

27 performed against a particular card, not against the particular holder of the 

38 card. As generally shown In Figure 7, the process 250, however, may 

39 selectively operate to request or require a registration or user identification 

30 before authentication is completed. Whether a registration request Is 

31 presented to a consumer may be based on the profile associated with the 
33 particular account identified for use by a consumer. Thus, In some sequence 
33 with the active 272, expired 274, or other steps that involve the evaluation of 
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1 the account profile, a determination 3.20 of whether registration is requested 

2 or required can be mode, A further determination 322 of whether the 

3 registration has already occurred cor; then be made. if registration 

4 information has not already been received, the required or requested 

5 information con be obtained 324 upon presentation of appropriate Web page 

6 form; I ^ J o s jtionsc dda \ d then pr* 1 , slyer ind 

? to the accounts database 202 at least for purposes of subsequent examination 

8 in the process of authenticating and authorizing redemptions agents! the 

9 corresponding account. Similarly, a usage history 328 may be written to 
10 ed of h port j k n v.on reg td to th c - th respect 
] '! to t 

12 Figure 8 shows a further modification and enhancement of the 

1 3 authentication and electronic transfer of digital goods process 250. A flexible 

14 focus limitation process 340 may be incorporated within the process 250 

15 generally in some sequence with the active 272,. expired 274, or other steps 

16 that Involve the evaluation of the account profile being authenticated. Thus, 

1 7 a determination 342 can be made from the account or related account profile 

18 astovvhefh < xo > I i. Where some oa 

19 limitation needs to he considered for "enforcement, the identified limitations are 

20 co" of on some order or as pad of a :h 

21 hierarchy determined by the corresponding account profile. This latter case 

22 allows for s;mple to quite complex "honusdevel," "rebate," and "incentive 

23 p'ogiam est * f 

24 authentication process 250. 

25 As shown In Figure 8, on ordered linear sequence of focus limitations 

26 con be iteratively examined and thereby used to constrain a particular 
2? redemption selection. These limitations, which are exemplary, include o 
23 "parental" or specific title inclusion/exclusion, limitation 344, a promotion 

29 limitation that may be specific to the number of digital goods available 346, 

30 a content limitation that may be specific to a particular artist, genre, label, or 

3 1 sti db 3 to a' d anv other definable ifrn t x 

32 as a business rule. .As each limitation Is identified, a determination can then 

33 be mad t 354 a tether tl I s thin 
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1 


the focus limitation. A toil 


yre of a selection to conform to o focus limitation 


2 


preferably results in a corresponding notification 356 being generated and 


3 


provie 


ted to the consumer. 


the correspond sng selection i% then removed or 


4 


aropp 


ed 358. The selac;;o 


n process, iterating through the determinancy 342 


5 


of wb 


sther any remaining 


focus limitations feme n fo b< 


6 




ues. Where a sefsd 


ion ts finally determined to be wsthm the defined 


7 


focus 


limitation restrictions 


344, 346, 348, 354, the selected digital goods are 




prepo 


red 360 and transfer 


red 36*2 to the consumer. 


9 




Thus, a system tor 


providing for the trusted channel distribution of 


10 


digital goods utilizing o net 


work communications syst'-m , s.a.n as the Internet, 


11 


has fa-: 


sen described. 




12 




In view of the abovs 


s description of the preferred embodiments of the 


13 


prese; 


it invention, many 


modifications and variations of the disclosed 


14 


em bo 


di meats will be rear 


lily appreciated by those of skill in the art. If is 


15 


there* 


ore to be understood 


in at, within !he scope ot the appended claims, tne 


U 


invent 


ion may be proctsce< 


3 oth pa sfi than s spec >ed above. 


17 
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1 1 ■ A digital distribution channel management system comprising: 

2 a) a digital warehouse storing a predetermined digital unit; 

3 b? a transaction database storing a plurality of transaction 

4 records; and 

5 c) a transaction server caupisebieto a communications network.. 

6 said transaction server being responsive to a request from said 

< tions network to serve said p? 

8 request includes predetermined information aothenticoteable against a 

9 predetermined transaction database record stored in said transaction 

10 database,, wherein said transaction serve 

1 1 instance of said predetermined digital unit and the serving of said instance to 

12 said communications network in response to said request where said 

13 predetermined Information is successfully authenticated against said 

14 predetermsned tra s ord 
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